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mmm 
1 ] 

GF (2 n ) _hT^«$tlS^Rffl^y 2 +y= f (x) ®^3tT#«#©H 
^-Dj = g.c.d. (ajCx), y- b x (x)) Jtr> , D 2 = g.c.d. (a 2 (x), y-b 2 (x)) 

a x (x), a 2 (x), b 1 (x)2fctFb 2 (x)&ftjW-rs#Si: % 

GCD (ajCx), a 2 (x)) =1 (GCDfc*«*4*a&#oE5£) ^*5*^lCfe»6 s j( 
x) a x (x)+ s 2 (x) a 2 (x)= 1 s j(x)Xtt s 2 (x) fcJgV^T, q (x) = {s 

j(x) (b 1 (x)+b 2 (x)) } mod a 2 (x)3U*q (x) = { s 2 (x) (b 1 (x)+b 2 
(x)) } mod a^xj&ffjjtn^ai:, 

& 3 £ i: -r s^ffi 0 

GF (2 n ) ±7?Sa^^S®fiRffi^y 2 +y = f (x) (DVu^&mfoom 
^-D 1 = g.c.d. ( ai (x), y-b x (x)) MD 2 =g.c.d. (a 2 (x), y-b 2 (x)) 
ICfcfU D 1 +D 2 fciK^M3&U'5 s 3.-^ > h • 7 s -f A^ifD' = g.c.d. (a'(x) 
, y-b'(x)) ©a' (x) &tfb' (x) 6ilT'^o T, 

GCD (a x (x), a £ (x)) =1 (GCDte**4*i|&#^5£) T?*>S©-&Klfetf« s x ( 
x) aj(x) + s 2 (x) a 2 (x) = 1 s ^x)?:^^!, q (x) =s 1 (x) (b^x) 

+ b 2 (x))mod a 2 (x)&itIfS#gt, 

y*ffcS*ifca (x) =Q (q 2 (x) ai (x), a 2 (x)) +Q (f (x) , a 
1 (x)a 2 (x)) (Q (A, B) (iA^Btl!Io£i:i©lS) & fUT* £ #« £ , 

£ (x) = (q(x)a 1 (x)+b 1 (x)+l) mod a (x) &fffj*-rs#«i:, 

a' (x) =Q (f (x) +/8 2 (x), a(x)) 

b* (x) = mod a' (x) & ff-JTr 5 i: , 
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gf (2 n ) ±T*%.mztiz>mm\ i i&imy 2 + y = f (x> ®"Vntf#«^©H 
^•D^g.c.d. ( ai (x), y-b^x)) izMLmun^mmt^mmx^^x. 

a x (x) fctf b j (x) % i- £ #Jg £ „ 

q (x) =Q (b 1 2 (x)+f (x) mod a^Cx), a^x)) (Q (A, B).tt 
[fih*33C4] 

GF (2 n ) ±T*^£*i£MlfRfTOy 2 +y= f (x) tf#«fr©H 
^-D^g.c.d. ( ai (x), y-bjCx)) (C*fU D 1 +D 1 ili»^BIIia;y-5 i 3.- 
* h • 7 s -f A-fif D' =g.c.d. (a' (x), y- b' (x)) (Da' (x)M*b' (x 

) *tm-t2>mmx&-ox. 

q (x) =Q (b 1 2 (x)+f (x) mod a^Cx), a^x)) (Q (A, B) It 

€-y^ftSftfca (x) =q 2 (x) +Q (f (x) , &1 2 (x)) Srff-J^S 

/S (x) = (b 1 2 (x)+f (x) mod ai 2 (x)+l) mod a (x) £ffflCf 

a' (x) =Q (f (x) +/8 2 (x), o(x)) fc, 
b' (x) = (/S(x)+1) mod a' (x) 

GF (2 n ) _hT^a$tiSM*IRffi^y 2 +y= f (x) cd-Yh tf#«f^©H 
^D^g.c.d. ( ai (x), y-b^x)) ^t?D 2 = g.c.d. (a 2 (x), y-b 2 (x)) 
JC*fU D 2 + D 2 £ifJ^im#& U ^n-X h • ifD' =g.c.d. (a'(x) 

, y-b'(x)) Oa' (x) &tfb' (x) ^ffltS^itfeot, 

GCD (a^x), a 2 (x)) =1 (GCDJift^:^#^) -e&3^§-a-lCfctt£ s j( 
x) a j(x)+ s 2 (x) a 2 (x)= 1 s : (x) £flf^T, q (x) = {s^x) (bj( 

x)+b 2 (x))} mod a 2 (x)S:tM(EbjaoaB*SI«tC«3Wcr«^'5 : -y^^> 

^-y *ffc$;ft£a (x) =Q (q 2 (x) ai (x), a 2 (x)) + Q (f (x) , a 
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1 (x)a 2 (x)) (Q (A, B) tt A &BT*«!lofc Srlt^bSofHU^g 
0 (x) = (q (x) &1 (x)+ b x (x)+ 1 ) mod a (x) fctfj* L.B.o3B«S 
a' (x) =Q (f (x) +/S 2 (x), a (x)) £ff # LjaofB'R^gfC&*fii-.5 
b' (x) = (jS(x)+l) mod a' (x) &ff£b J.offi«SttlC*&tt-r** 

GF (2 n ) ±T-^^n-5^*IRffi^y 2 +y = f (x) hf#tMfc<Z)S 
^•D^g.c.d. ( ai (x), y-b^x)) K*fU D 1 +D 1 ti»^M*y-5 i 3.- 
-f^A>fifD'=g.c.d. (a*(x), y-b'(x))ffia' (x)&t>*b' (x 

q (x) =Q (b x 2 (x)+f (x) mod a^Cx), a J (Q (A, B) SAS: 

B T*Sf o £ £<z>i§) Srff-J? bB.oSamMStc^M-r & y 

^-^^ffcSflfca (x) =q 2 (x) +Q (f (x) , a^x)) fefffTUja 
£ (x) = (b 1 2 (x)+f (x) mod ai 2 (x)+l) mod a (x) ZtiMV 
a' (x) =Q (f (x) +j8 2 (x), a (x)) fetflf bB.ofB«5liBK:««f"tS 
b' (x) = (/8(x)+l) mod a* (x)&#f»Lfioffi««*JCtett"r<&* 

GF (2 n ) ±T^g6$^^M*»Rffiay 2 +y = f (x) cd-Y3^#«#:©H 
: ?D 1 = g.c.d. ( ai (x), y-b 1 (x)) &tfD 2 =g.c.d. (a 2 (x), y-b 2 (x)) 
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GCD (a^x), a 2 (x)) = 1 T'ZbZM&lZ&tf £ s x (x) a r (x) + s 2 (x) a £ (x) 
= 1 s 1 (x)Xiis 2 (x)S:MV^T, q (x) =s x (x) ( b x (x) + b 2 (x)) m 

o d a 2 (x)X&q (x) = {s 2 (x) ( b : (x) + b 2 (x)) } mod a^x^fffl 

GF (2 n ) JiT*j£^2 4xS^Rffi££y 2 +y = f (x) CDtn t?#*i#<Z)g 
^•D^g.c.d. ( ai (x), y-b^x)) KIj(fL/»Stl¥«:^Jfei-**iS67?*oT, 

q (x) =Q (b x 2 (x)+f (x) mod a^Cx), a J (Q (A, B) 
[0 0 0 1] 

*mmi*. GF (2 n ) ±T-^$ti-5M«Rffi^y 2 + y = f (x) ©-Vnif 
^MCDH^Dj-g.c.d. (a x (x), y-bjCx)) &tfD 2 = g.c.d. (a 2 (x), y 

- b 2 (x)> izttvmmwzmm-tzmmR&Jimzm-t&o 

[0 0 0 2] 

*Htt, GF (2 n ) _hT'^^4x^>jS*IRM<0^nlf#^#:(7)^lt»^A 

[0 0 0 3] 
[l] IffiRfttoW 

a»g©a«Rffli»CttS; : y 2 +h(x)y= f (x)T?)tj|StiS. ^lth(x) « 
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*fe^Sj^P= (x, y) P(Z>&$:,££P — = (x, -y-h 

(x)) £fem*Z> (P — &P<D±lC/1-##^fc*;CD) . tUP^ISMP^ 
fc&tf* P 00 =P 00 _ (Poo~ ttPoo^Jll-^-tftfV^fctf)) ilt-So js*fk 
#Btete#K = GF (2 n ) , h(x)=l©f^}C0V^^S„ 
[0 0 0 4] 

1 P 1 + m 2 P 2 + . . . +m r P r $:#^T, iftfeCOB^Cdivisor) fcPf^. C 





1 1 
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[«2] 



[«4] 



D = m.P. 

1 p. ec 1 1 



2 _ _ _ 1 1 



D,+D = (m.+ n.)P. 

1 2 v 1 r 1 



P.GC 
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(D^&&Z$m*m V>T h ©S^div(h) £ 



mmmhoffi'v&v. n i itm<Dm^m> ord pi (h) miiichc^PiC 

£tt3&ffcT-&£ 0 &S#3SB8ifc©H^-£&£ ie>fcB^£a£H^ (principal 

divisor) t^o B nm^tiwM&z^m^mzi&tf. d 1 co 

[0 0 0 5] 

^h^<DVD l (C) CD 0 (C) 7?$>S 0 2offlB?D 1 (»1) , D £ (» 2 ) 
GD° (C) ##*.e>;ftfcB#> 2o©0?fflg.c.d. (Dp D 2 ) Smin (nij 

, nj) Pj- (Smin (nip rij) P^Tf^*"*-*. ') . £ k5£<k y IJS ^iCg.c 
.d. (Dp D 2 ) (ZD 0 (C) tfeS. 
[0 0 0 6] 

[2] vziv&mttia&m 

o jcwrs!Wjfe»T?feaisne coi*^, "«»AF92" (1996) 

^£#BgGDi£) o (C) %U Dp D 2 GD° (C) t'D r 

D 2 Gd' (C) -e&£&?>k£, Dp D 2 tt«^HfiD 1 ~D 2 , efe5 -5 . VD 
€ED° (C) tt, ^©MSrlfetH^D! 



div(h) 



2D ord p (h)P. = 




[»6] 




OO 
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(m^O) KW&-t2>Z- ttfVZZ. 

(1) Dj~D 

(2) Pj= (xj, yj) fc&fKj&Pj - (P^ilCA-^VNfefe©) ttpW 

(3) P^Pj - -Vib&mZ. mj= 1 

30DJ:e>iC^J^^tlfeia^-$:-fe^ U^a — h • /Wif (semi -reduced div 
isor) £.\%& a $ £> (C semi-reduced divisorlC^f 
[»7] 




SE^StlfeH^SrU-ra-^ h -^WVWlf (reduced divisor) £:UJ,$* 0 
[0 0 0 7] 

f£;f£<Z) semi-reduced divisor Dli, D=g.c.d. (a (x) , y — b (x) ) 
fCioT-tiCit^il^T'tSo d^T a (x) =n j (x-xj) B1 , b (x 
) »b (xj) =y i% deg b <deg a fcttfe-Tnl— ©MSt*S. D ^reduce 

8 tttSEf^ 11-3027520 
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d divisor^ deg a^gtfe5. D.G. Cantor, "Comp 

uting in the Jacobian of a Hyperel 1 iptic Curve," Math, of Comp, 48, No.l 

77, pp. 95-101, (1987) lC&£>oT, g.c.d. (a (x) , y-b (x) ) Hi 
v (a, b) tm-t* ^WSfDtt2o©M^aMb tM-^ir 

[0 0 0 8] 

J (C ; GF <2 n ) ) ±<DM®:MmmmtHZ. D v D 2 GJ (C ; GF (2 n 

[0 0 0 9] 
[3] ^3^#«#<Z>££&# 

^^mm^mm^^mm-t^r^iz, ^a^mi^j (c ; gf (2 n ) 

fi#Bffi»l&#©IIIJ*fc*©2£S*,. " SCI S' 98-1 0.1. B, Jan. 1998^&C J: £ h , 

ci #j cc;gf (2 n > ) tf±£&mmx*m j wfr2> 0 

C2 J (C ; GF (2 n ) ) ©**3j&B«# (2 n ) k - 1 (k< (log2 2 ) 2 £ 

C3 2g+l<log2 n 
[0010] 

[4] -V3bf#«ifr(z>^siisc<z)r^=ruxA 

-V3lf#«#K:feW-6iDj¥t±, D r D 2 GJ (C;GF (2 n ) ) JC*fU & 
lCD 1 +D 2 4ll8JgHMBJ& reduced divisor D' ^^ftSIttfeS. Cantor£>5fc 
<Dii^CS.tJ f N.Koblitz, "Hyperel 1 iptic curve cryptosystems," Jounal of Cry 
ptology, 1, pp. 139-150, (1989) &C <fc tU£> MW<DT)ld[ V XAIi 2 
fr^5 0 rcfitltli, A^Dpdiv (a p b x ) &t>*D 2 = d i v ( 
a 2 , b 2 ) iCjtrfb, D 1 + D 2 ~D (D=div (a, b) ) J: z> &semi-r 

educed divisor D$:f^S 0 2 X\tZ.<D D £ A* £ IT D~D' (D' = 

d i v ( a ' , b * ) , deg b ' <deg a ' , deg a'^g) £: & £ J: "5 & reduced 
divisor D' S=fiRffii&g£y 2 +h(x)y = f (x) 3*l£>tf> 
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[0011] 

i 

Input a j, b^ Dj=d i v ( a -p b j) 

a 2> b 2 ^2 = ^ * v ^ a 2' ^2? 
Output a , b 

(1) a 1 (x), a 2 (x), b x (x)+ b 2 (x)+ h(x)©*^:^#^ (GCD^SB^-S 
) d = d(x)t^ot, d = s x a x + s 2 a 2 + s 3 (b x + b 2 + h) fciifc^s^ 
x), s 2 (x), s 3 (x) $r^4t)-5o 

(2) a(x), b (x)*?ki£^m-3^TmM-tZ>o 
a = a j a 2 / d 2 

b= ( s j a j b 2 + s 2 a 2 b ^+ s g (b^bg+f) ) /d mod a 
2 

Input a , b 

Output a', b' D~D' 

(1) 7£:£&C»c5v*T, a' (x)&tfb* (x)£ff||-r& 0 
a ' = (f-hb-b 2 ) /a 

b ' = (- h - b) mod a' 

(2) if (deg a'>g) then 

a = a ' 
b = b' 
goto ( 1 ) 
else end 



1 0 
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a = a^ 

b = (b t 2 + f ) mod a 
goto 2(1) 

[0 0 12] 

W&W L/ £ e> i: T S8RS] 
3g5£©Si3*#&g i: * »; , ft#*^# < & £ £: vn e> * s . 

[0013] 
[0014] 
[0015] 

Jn?*»5lfflUfcflftS:K:fl2«stiT^sj:^K:Kobiit2tt, &8ttf i <fcy*#^ 

, aR^awffimtiFreyJCioTgc^Tf^Vxifc^Stlfe (G. Frey, E.G. Ru 
ck, "A Remark Concerning m-Divisibi 1 ity and the Discrete Logarithm in th 
e Divisor Class Group of Curves," Math, of Comp, 62, No. 206, pp. 865-874, 
(1994) Z^m&zit) . 3 #_h© 5fc£fcJBfr;ftSffil8#v*< 

o^^ot^s ca#j*ff, mn^-, "^3&jS«Rftt8ie# 

" SCIS* 98-10. l.B, Jan. 1998. "/.h3vvfil»©^ 
K#±T?"*=lfcr#«M*# almost prime J&5j&nf BffiiW, " SCIS' 98-7.1. A, J 
an. 1998, S. Arita, "Public Key Crypto systems with Cab curved)," IEICE 
ISEC97-54 pp. 13-23 (1997)^$r#flg©Z. il) . 



1 1 
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-IBIcgf (2 n ) K&V}&m.»i* (l) Ji0-iI^Jt»MI«;^-K 

^xT^waKiiiff-e^s, (2) 2sisu»* ! ffi#K:-e$*» (.3) &7bmn 

^JK-ifc^©il*Lfe*ffiJCj:oTlff5«JC^-eS* (T. Itoh, S.Tsujii, " 
A Fast Algorithm for Computing Multiplicative Inverse in GF(2m) Using No 
rmal Bases," Inform, and Comput. , vol.83, No. 1, pp. 171-177, (1989)) & 

i£^T/J^ <T£rt?r£, ±7?3&'<£:, Cantor© T;i/^r'; XAlCfc V^TfffrtlS 

xT|l8SK:*fV*TV^ 0 ioT, #»IJII*ett, Cantor©T;i/lfUXA$:aJcKL/T 
[0 0 16] 

^<Dk&J^T<£i:e>&#$b^&£o -T^fct., GF (2 n ) _h-e^«E$ *l£ i© 
ftRMSy 2 +y = f (x) o^rzifcf^^cDH^D^g.c.d. (a^x), y-b 
x (x)) &tfD 2 = g.c.d. (a 2 (x), y-b 2 (x)) (g.c.d.liMSf 0 0 0 5{C 
^^tlTVAS) KMLm&9f-*MM't&mm** a x (x), a 2 (x), b^xJM 
b 2 (x)^fS^i:, CCD ( ai (x), a 2 (x)) =1 (GCD««^^J#^) 
-efee^-^lCfe^S s : (x) ai (x)+ s 2 (x) a 2 (x)= 1 s j(x) &Jfv>T, q 

(x) = { Sl (x) (b^xjH- b 2 (x)) } mod a 2 (x)*sm-?Z>^®.Hmt2> 
. CI©* 3 q (x) &aRW*ri:K:J:y, ±#©tWfi#«*i>U 

Ioa- K^Tat^SKTgrtf,, ^J6«T?«, ®ff Rffii&!#y 2 + y = x 7 T* 

q (x) i«3fricfflv>&:: ffimnT*i*&mmtff&iL'?z<DT* 

, a p b^tfs^ a 2 , b 2 &tf s 2 *:&£iJ|LT#&*l5q (x) 

IE?" 3 3£=fe>&S*K ^ilttUDft^tS. q (x) = {sjCx) (b t ( 
x)+b 2 (x)) } mod a 2 (x)li, q (x) = {s 2 (x) ( b x (x) + b 2 (x)) } m 
od a^xJtfSit^gS. 
[0 0 17] 



1 2 



m$E#5p 11-3027520 



11-007384 

D^DgCDtB^tCtt, a 1 (x)&tjeb 1 (x)&«|ft-rs#iai:, q (x) = 
Q (b 1 2 (x)+f (x) mod &1 2 (x), a][ ) (Q (A, B) tiASrBT'Iofci: 

fcfffSM- ^©^^icJMfitOq (x) tfemirz. 

[0 0 18] 

jgffP3ffii&§l#y 2 + y = f (x) t?& GF (2 n ) JbTfjeHStiSjE 
fnWSlOtn^iftOS^Dpg.c.d. (ajCx), y-bjCx)) &tfD 2 =g. 
c.d. (a 2 (x), y-b 2 (x)) lC*fU D x + D z t.ffi&mUte V -r =l - X h - 7 s 4 
AJ4fD' =g.c.d. (a'(x), y-b'(x)) (Da' (x) &tfb' (x) &ff-J**t 
S^ffte, CCD (a^x), a 2 (x)) =1 (GCD«S^^J#^) 
tt£ s j(x) a j(x)+ s 2 (x) a 2 (x)= 1 s jW^JgVkT, q (x) =s 1 (x) 

(b 1 (x)+b 2 (x)) mod a 2 (x)&#Hrrs#!K£, ^^ftStlfca (x 
) =Q (q 2 (x) ai (x), a 2 (x)) +Q (f (x) , a 1 (x)a 2 (x)) (3U*> a ( 
x) =Q (q 2 (x)a 2 (x), a^x)) +Q (f (x) , a 1 (x)a 2 (x)) ) (Q (A 

, B) ttA&B-efsrofci:£©iS) &#Hrr*#a£> /s (x) = (q(x) ai (x 

)+b 1 (x)+l) mod a (x) (Xfcfc, 0 (x) = ( q (x) a 2 (x) + b 2 (x) + 
1) mod a (x) ) S:tf*t*S#®fc, a' (x) =Q (f (x) +/S 2 (x), 
a(x)) Srtmt-r b' (x) = (/S(x)+1) mod a * (x) & Sf-JM* 5 

[0 0 19] 

— 2f, D 1 =D 2 T'$>S^IC«, q (x) =Q (b x 2 (x)+f (x) mod &1 2 ( 
x), ai ) (Q (A, B) ttA*:BT?Hofc££©lffi) fctNTTS^a*:, ^E — 

y^-fbstifco (x) =q 2 (x) +q (f (x) , ai 2 (x)> 

, 0 (x) = (b 1 2 (x)+f (x) mod ai 2 (x)+l) mod a (x) fctf-JJ-r 
a' (x) =Q (f (x) +/3 2 (x), a (x)) b' 
(x) = (0(x)+l) mod a' tofctf^-rS^MKi: *o 
[0 0 2 0] 

J6*±B:a- K^xy-ffc&f&Sifc Lfc*J*T?*<&#. rtl&Srn^tTa- 
# • ^7 A^tUff «fc ^ 3 £&nSffiV&Z> 0 z?n>? 
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[0 0 2 1 ] 
[0 0 2 2] 

tt, #<©*^GCD (a p a 2 ) =li:&5„ -£4"l*£x. a : £. a 2 #i!t-e& 
<DM3l&ffifmc*£&j^#£^;t£V><Z>T% #HT?l±GCD (a r a 2 ) 1 0>t§ 
Vn„ ^<DS*^#3U£GCD (a p a 2 ) = 1 W^JgsS s j_ 

, SgJCcfcoT, s x (x) a 1 (x)+ s 2 (x) a 2 (x)= 1 ©J: ? IC^£*1 

, v) Mnrt^t-ts. 

[0 0 2 3] 

X, _hT*3iiBUfetS63Rft«f©#«iS 1 (1) <0SI», f^t)*>, ##5£ s r 

'J^Filt U-K'Vn^EV (Reed-Solomon) $f if T% f|»;&g# 

fcf, 7-202718 #^Xi±#^Bg 62-122332 

CD^to ioT, (1) ©2oCD#^<Z>ft^J|&#^ 

dilc[=s 1 a 1 +s 2 a 2 &lfcts 1 (3U£s 2 ) CZ>* flUSt*, fff-j*T?£ 
fc=b©i:Ltfte> 0 MiTOTt^-5»J (HI) &J§V>Tff-3rr<5 

ffi^J$tl-5fe©i:-r^o *fcft*45i*&#^5£dj&U £&5<fc? s x (x) ttlEgifl; S 
*ITV** 

[0 0 2 4] 
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Input a a 2> b b£ 
Output a * , b ' 

a ^ C^O == a* ^ ^ ^ 

bg(x)= ( s ^ a ^ b 2+ s g a g b ^) mod a 3 
a 4 (x)= (f + b 3 +b 3 2 ) /a 3 

b 4 (x)= (b 3 +l) mod a 4 (x) 
while (deg a 4 (x)>g) { 

a* = a 5 (x)= (f + b 4 +b 4 (x) 2 ) /a 4 (x) 

b' = b 5 (x)= (b 4 + 1) mod a 5 (x) 

a 4 (x)= a' 

b 4 (x)=b* 

} end 

2 (1) *eiia&tfb©&«tt2T#»;, -£*Us*tfcl ^&»#T#S£fc#£ 
, while loop©*?: 1 [Ullff-rsr fcJC <fc *J, ^»^3JKT©a'*«#**ii: 

Jg^; q (x) = s 1 (bj+bg) mod agSc^A^-So 

[0 0 2 5] 
ill 

3g^l©S*J©a 4 (x)tt, q(x)S:Mv^ta 4 (x) = Q (q 2 a r a 2 ) & 
Z1Z17?Q (u, v) &u/v(Z)f§&#*L£gi$fcT*&£o 
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mm) 

s 2 a 2 =l 0 ZinSrfflVAT b 3 ©ft^$:deg ai a £ >deg b^C&SUT^tt 

bg(x)= ( s ^ a ^ b 2+ s g a g b p mod a 3 

= (s jajbg+ ( 1 + s ^ a j) b ^) mod a^a 2 
= (sjaj (b^+bg) ) ">°d a^g+bj^ 
= { (Sj (bj+bg) ) mod a 2 1 aj+ b j 
= Q a j+ b j (#) 

?klZa A <Dm<')mZ t m i )tytlZ>Z.£ll, deg b 3 <deg a 3 «fc»;, Q (b 3 , a 3 
) = 01f&4rfc*>&, 
a 4 =Q (f + b 3 + b 3 2 , a 3 ) 

= Q (f, a 3 ) +Q (b 3 2 , a 3 ) 
T'foZ. m2m.lt (#) SrfSAU deg b 1 2 <deg ajiVQ ( b a 3 ) =0 

Q (b 3 2 , a 3 ) =Q (q 2 a 1 2 +b 1 2 , a 3 ) =Q (q 2 a 1 2 , a 3 ) 

ZL*lJ:»J, a 4 (x) = Q (q 2 a p a 2 ) +Q (f, a 3 ) Q.E.D. 
[0 0 2 6] 

aj(x)=x +CgX +CjX+Cq 

o 9 
ag(x)=x +egX +ejX+e Q 

b 1 (x)= d 2 x + d j x + d q 
b 2 (x)= f 2 x2+ f i« + f 0 

£5taU f (x) = x 7 £M^££, a 4 ©H2Jgli, Q (x 7 , a 3 ) = x+c 
2 +e 2 £&£ 0 34Xcfc*J, q (x) £ ffi ^xmm 1 fc^SI" JeAT£>J:e>& 
© r ^ U X A il & £ o 
10 0 2 7] 
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Input ap a. 2> bp 
Output a ' , b ' 

q (x) = s 1 ( b 1 + b 2 ) »od a 2 
9 

a^(x) = Q .( q a p a 2 ) + x+c 2 +e 2 
a 4 fc^y*ffc («MIS©SfflM?:l{Ct5) 
b 4 (x)= (qa 1 +b 1 +l) mod a 4 
if (deg a 4 >3) then 

a' = a 5 (x) = Q (x 7 +b 4 2 , a 4 ) 
b' = b 5 (x)= (b 4 +l) mod a 5 
else a' = a 4 , b ' = b 4 
end 



[0 0 2 8] 

&£a 5 (x)tf)gf|f^ deg b 4 <deg a^Siti'JQ (b 4 , a 4 ) =0 

*©SIIJ^«J¥3ttF|»ffS:ff^^&M*«3ifc<JQsoTV^S 0 tfea 4 (x)$:ftlt60{; 

Q ©tfi(Z) q 2 a jCD^cSK^ 7 rkV&Z>Z £ HWmt>' 2 T*3d& Zl £. <fc 
9 0tJ:K $ £IC a 5 (x)©tfB{C^VNT£^(©^V>b 4 (x)^Q©tft^P>^: 

[0 0 2 9] 

7£ic2^w{c^t#3.s 0 mtmmiz'fc&nfficD^mg 1 (2) fc^jg-rs 

Input a p b ^ 
Output a * , b ' 

a 3 (x)=a 1 2 

b 3 (x)= (b 1 2 + f ) mod a 3 
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a 4 (x)= (f + b 3 +b 3 2 ) /a 3 
a 4 (x)©=E-vy ^>fb 
b 4 (x)= (b 3 + 1 ) mod a 4 
while (deg a 4 >g) { 

a' = a 5 (x)= (f + b 4 +b 4 2 ) /a 4 

b' = b 5 (x)= (b 4 + 1 ) mod a 5 

a 4 =a', b 4 =b' 

} 

end 
[0 0 3 0] 

©fMStf&SSfcfc*. £ft q (x) =Q (b 3 , a : ) $:#A-r 
5. 



:^2 0a 4 (x)lj:q (x) SrfflV^ a 4 (x)=q 2 +Q (f, a 3 ) T*$-7L<bn 



mm) 

deg b 3 <deg a 3 £*JQ (b 3 , a 3 ) = 0 
a 4 (x) = Q (f, a 3 ) +Q (b 3 2 , a 3 ) 

m2WZQ (b 3 2 , a 3 ) =Q (bg, a 3 ) 2 £fc& 0 r*W±, b 3= r i 
+ s l /a v deg s 1 <deg a jfc f £ i:=R» 2 GDffcCDJtT'&i, b 3 =r 1 2 +s 1 2 
/a x 2 , deg Sl 2 <deg a *) tL~D Z. £ & 3jf£ e>#T&S. a 4 ( 

x)= q 2 +Q (f , a 3 ) Q. E. D. 



[0 0 3 1 ] 

tia&Hm&Kf (x) = x 7 £M^S£. a 3 (x)= a ^(x)©*^^©^ 
fcV*CIi:;fr£>Q (x 7 , a 3 ) =xi:^5„ Zitliy q (x)S:ffiv^TlE^2 &«S 
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Input a p b ^ 

Output a ' , b ' 

b 3 (x)=b 1 2 +x (a^x 3 ) 2 
q (x) =Q (b 3 , 
a 4 (x)= q 2 +Q (f , a 3) 



b 4 (x)= (b 3 + 1 ) mod a 4 
if (deg a 4 >g) then 



a' = a 5 (x) = Q (x 7 +b 4 2 , a 4 ) 
b' = bf;(x)= ( b 4 + 1 ) mod a 
4 , b ' = b 4 



5 V-y- V u 4 r <* 5 

else a ' = a „, b ' = b 
end 



[0 0 3 2] 

&£b 3 (x)tf)ft^:^T&, x 7 mod a 3 =x (x 3 ) 2 mod a 3 =x (aj- ( 

00 o o 

a^— x ) ) mod a 3 =x (a^-Xg) mod a 3 =x (a^— x 3 ) , deg b^ 
2 <deg a 3 ^fe^Zli:^?> b x 2 mod &3 = b j 2 £ 3 il &MV*T^£,, £ fc. 

2fH#§te/.b£&^- F^yeH^-e^Stf)-?. b^x^©f^t> y iz 2fH#g&l# 

ht=.tfT°mm-V£2>o bsWtf&mtemt. a^x), b^^HtfglCA^U 
* <D ffi ji £ a V > tl « J: V * „ 
[0 0 3 3] 

am&mx&xfKim zn? < & o t ^ & 0 £ ^ a 4 (x) 4 & x*m 

£ ^lCa 5 (x)©g+^t{CfeV\T : fo, ifr§!<Z>&V\ b 4 (x)#Q<Z)i£fr £*lTV^ 

o 



1 9 
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[0 0 3 4] 

&&ffimiR.lf2teli(x.)= UBT'^Ufio. Q (f, a 3 ) ttf© 

[0 0 3 5] 

®ffR finite J: T-Ggo£y 2 + y = x 7 M0t)©t^ot : &J;v^ M*. 
tf. g = 3a>m-&lC«, K = GF (2 61 ) f (x) =x 7 +x+l^, K = GF 
(2 67 ) f (x) =x 7 +ims. ±©7M'JXA^x 7 i: bTV^fcfcdS 
r©J:e>&f (x) JcB^iJ|7t*ili, frfcKq (x) &#A"r*S8r*tt»S 

o 

[0 0 3 6] 

T?fcJu Hi icjifay;i/:?y XAcA^Mfc^o i tt-fe i/* * i ( 

3) H±ls9*2 (9) JCgSttStlTV^S. 1zl/**l (3) Jfctfir I/** 2 ( 

3) tti/$?**A£ffl<z>izi'* -fei/**2 (9) tiaiJKSJfctfn^s 

&tf>f>/t-*A:frm©-fe I/* 1zl/##l (3) £1zl/**2 

(9) £St|*»;&tfn3HS&5£>f >7t-* 7&, n> hn-7 l l K£ »;-t*ie> 

LTjaoS§^«S»©fe«)lCMv^&tl-5 l/^;**Ureg % Xreg % Y reg&tfZ reg£ 
, A^il^SajCx), a 2 (x), b 1 (x)&tf b 2 (x) £#*&$nr<5 * a p 

a 2 , b^tf bg&^fr. UregtXreg©|2^««4^fetJ, &»J©1/ 

[0 0 3 7] 

*ett, *^®7^dyXA (*tS©;&&3l) SrHflgl-SBRtC 01©IIM»#£ 

IT, s L (x)= s 12 x 2 + s n x+ s 10 ©#^R& YregjtffMftLTV^. 

a r a 2 , b^tfb^i, -etl-^tlajCx), a 2 (x), bj(x), b 2 (x)©«»S:* 
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•*-<5&5#&V%. -r&fr-fe, ajlicg, c^tfc^, a 2 &e 2 , e^tfeg, 
bj&dg, d 1 3ttJPd 0 , b 2 lif 2 , f p&tff 0 &*MftLT^£„ 
[0 0 3 8] 

q (x) =s x (b x +b 2 ) mod a 2 &ft&1z.to<DftW-&Mte'*&. -fe 1/ 
?#2 (9) J^TOf+B5:IIJg-r^<> l/^^l^^S*i^'Ja} 

(1) p 4 = (s 12 • b' 2 ) [x 4 ©««] 

p 3 = (s 12 - b , 1 +s 11 - b' 2 ) [x 3 ©«»] 

P 2 =s 12 - b' Q [x 2 ©^»] 
(b x + b 2 ) 

= (d 2 +f 2 ) x 2 + (dj+fj) x+ (d 0 +f Q ) 
= b' 2 x 2 +b' 1 x+b' 0 



[0 0 3 9] 
s l ( b i +b 2^ 



= (s 12 


• b V 


x 4 






+ (s 12 


• b 'l + 


s ll- 


b ' 2 > 


x 3 


+ (s 12 


* b ' 0 + 


s ll" 


b 'l + 


s 10 


+ (s n 


• b 'o + 


s 10* 


b 'l> 


X 


+ s io' 


b 'o 









iot (1) ©ff-flttt, s : (b^bg) <D4?kRX$3?k<Dm<D%£temm£. 
21k<DS&(D-n><D&WLV>. tf-JTe**. Zfrbonm&mttl'tr $ 1 (3) iZ 
•fcUUregJCftiWStlS (03 : Uregtf)^®^) . (1) © J: 3 ff-J* £ "T <5 © 



2 1 
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±fi4o©^®M$: (i) -e^dscrsifc^Brffi-efes. a 2 ©0j^tt 

[0 0 4 0] 

#ClC> P 4 x 4 + P 3 x 3 + P 2 x 2 &C*f-LT a 2 (x) = x 3 +e 2 x 2 +e 1 x + e o 0 

»^tf»3ttf s j (bj+bg) ©o«k<z>^a>«»©fff»s 10 - b' 0 =p 0 =Mfe>o 
cfcoT, -fei/*#2 (9) fcju&M&ft&flSty tBU 3ISW»&tfnSI»5K:-€-*ie> 

(2) ( p 4 x + p 3 x + p 2 x ) mod a 2 
s 10 - b* Q [x°6D#»] 

[0 0 4 1 ] 

(P 4 x 4 + P 3 x 3 + p 2 x 2 ) mod a 2 £ <fc y ffpb < gB^S fcje*T© «fc ^ ICfc 

p' 3 = (P 3 +P 4 - e 2 ) [x 3 <Z><&»] 
P' 2 = (P 2 +P 4 - ep [x 2 ©£MR]. 
P'l=P 4 • e Q IxCO&Ml 

fit, 

p 'o = s 10' b 'o [x 0 ®#*M 
rtl^<Z)ff#M^$:-fe l^^^ 1 (3) l±UreglC^i-S (04 : UregGD^H 

a*) . (2) <D&$&ftn&mm+&<D*m»&Rxf^m&5<Dmn&<D§&ifi4 

[0 0 4 2] 

&tCp* 3 x 3 + p' 2 x 2 +p' 1 x + p' Q mod SL 2 <Dtfm*:4fo. r*i£$£>tc# 



2 2 
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. fH»*A0fziife«5K:**ie>«:A*"t«. 

(3) p" 2 = (p'g+p'g- e 2 ) [x 2 tf)^£fc] 

p "l = ( p 'l +p V e l> Cx 1 ®^] 
p" 0 = (p' 0 +pV e 0> l> 0 ©«»3 

^tie>(D#f#^5:-fe l/^ # 1 (3) JiUregJCftlft'rs (0 5 : Ureg©^0 
[0 0 4 3] 

JW_h©tfBT'« s j_ (bj+bg) <Z)3t>, (s n - b'j+sjj - b' 2 ) x 2 + ( 
s ll* b 'o +s ll* b 'l ) xK^^^JftStlT^fcV*. ioT, JS*T©J:e>& 
lfW5:-r^<> i?l/*#2 (9) i«*i^$'Jffil, ffcJMfcRtfn^* 5 JC 

(4) p" 2 + (s n - b'j+s^- b' 2 ) Lx 2 (Dmmi 
p "l + (s 11 ' b 'o + s 10 ' b 'l ) C x ®«ti 

3tl^(Dtf"#tCT q (x) = q £ x 2 + q x x + q 0 «^^ofe o i2 1/ ? # 1 (3 
) tt, ^tl^CDff#^?:Zreg{C^t--g) (13 6 : Zregtf)^^) 0 
[0.0 44] 

#ClCa 4 (x) = Q (q 2 a p a 2 ) +x + c 2 +e 2 ®ffI$:iitS G ^(Dtz.&> 
» *#JtC qSa^fUffcf?^. fib, agCDiSOff^T^S^ej 2?^T©^« 
ltW-t^^^Vx 0 JKT©fff#S:ff^fe«>» -fcU?#2 (9) tt, SmteMZ 

(1) P 7 =q 2 2 Cx 7 ©#|5c] 

P 6 =q 2 2 - c 2 [x 6 tf)GSffc] 
P 5 =q 2 2 - c 1 +q 1 2 [x 5 ^)#tJC] 
P 4 =q 1 2 * c 2 +q 2 2 - c Q [x 4 (Z>#ffc] 

£ d T'tt q 2 a 3 *©^©tfff tt*||*©»j&OtUreg<3r>aa*ffitt3S«J£ U ft 
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(0 7 : Ureg©#.®^) „ 
[0 0 4 5] 

q 2 ap 

q 2 2 x 7 + 

2 6 . 

q 2 • c 2 x + 

(q 2 2 - Cj+qj 2 ) x 5 + 

(q x 2 - c 2 +q 2 2 - C Q ) X 4 + 

(q x 2 - Cj+q/) x 3 + 

2 2 2 

(q x • c 0 +q 0 • c 2 ) x + 

q 0 2 Cl x+ q 0 2 c 0 

[0 0 4 6] 

(1) ©ffU¥©W*&i:#JC, q 2 2 (03a»»©ff»S:B8«&'rSc *.\s>7 
#2 (9) te, *J(C»2fctJf-M5^tMIStifcq 2 2 ©«*S:>f 7 ICA 

J]~$~Z> a q~= 1 / q 2 2 

[0 0 4 7] 

o 

(2) p' 6 =p 6 +p 7 - e 2 [x 6 ©flMR] 
P' 5 =P 5 +P 7 - e x [x 5 (Z)#2&] 
P'4=P4 + P7* e o C x4 ®^R] 

a 2 C J:SlSS:^J¥f p 7 x 4 ««S*J{C#* P 7 «®EtC^ 

* oT£ »;M"oft*Fa9tC#«)J: ? £ LTV%S a ^i^ — y *ft£ iftSCDT?, Ureg 
{C^MbTfc<^«^v> 0 3*l&©fM!t#g*S:-fe I/** 1 (3) tt, UreglC 



2 4 



£tJfjE#3}Z l 1-3027520 



iff 5p i 1-007384 

tttt-TS (0 8 : Ureg(D&®^) . 
[0 0 4 8] 

(3) p" 5 =p' 5 +p' 6 ve 2 [x 5 ©^tft] 

p" 4 =p' 4 +pV e i Cx 4 ©«8S[] 
P W 3=P , 3 +P , 6 - e Q [x 3 ©#»] 

i E-^^ffc;l&©a 4 €:JKT©J:^K:Sa*-rSo 
a^(x)=a ^x^+ a 43 x ^+ a 42 x ^~*~ a 4l x "*~ a 40 
fiU a' 43 =p' 6 [ a 4 <Z> 3 

-fel/*#l (3) fct, p'g&Uregfr&StyffiU ^tl^CDftmM^^^lCUr 
eglCteHft-TS (09 : Ure«©#Ha*) . 
[0 0 4 9] 

£*>fC, a 2 JCJ:*S!fj^tf-»?:fT^. <BU CKOffUCtCfc^Tli a 4 © 2 7&tf)^ 

(4) P 3 4=P"4+P" 5 - e 2 [x 4 (Z>^iS(] 
P 3 3=P"3+P" 5 - e ± lx 3 <D&m 

a' 42 = p" 5 [ a 4 <D 2 7^<D3S©^IS:] £&5„ 
«fel/**l (3) p" 5 XUfa' 43 «:Ureg^e>JRyfflU Zltl ©ftHEMHI 

fc#JCUregfc:jfei»f.5 (010: UregO^EI^) . 
[0 0 5 0] 

a 2 lC j:SPJ^fm$:^e>o <BU i<Z>tf-J¥{CfeV%Ttta 4 ©l^C<Z)^ 
— yiMtfEf) 1=r i± TU regie CI £{C&£c 
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■fel/**2 (9) &&^fcffi£b^X#3n^e>lfcyffiU ffcJMfc&tf ziSMB 5 

( 5 ) p 43 = p p 34 • e 2 [ x (D{&Wtl 

a' 41 =p 34 +l la A <Dl?k<DJg<D&m 

"ZVVZl (3) a' 42 &t>*a' 43 &UregfrP>Ifcy ^tl^^tfWM 
HI £ & fCU regies -T £ (HI 1 : Ureg©»®^) . 
[0 0 5 1] 

mz. a A <D01k<Dmo&M i^-vtitm) &ftll^££&;&tfa 4 <Z>QJ£^ 

©m©*n^^^fc^, iru*#2 (9) &&g&iBS: us;;**fm #e>scyflj 

(6) a' 4Q = p 43 + c 2 + e £ [a 4 ©^IS[^] 

(3) tt, a' 42> a , 43 &t3Pa* 41 S:Ureg3^e>m»;ffiL, itie>© 
#f3M&£i:#JCUreglc;fett"r«6 (Si 2 : Ureg(D*®^t) 0 itllCTa^^ 

[0 0 5 2] 

#cic, a^*— yiMfc&fr-S. a 4 w:4#c*e&y, -£<z>#ffcte a 2 2 T*%>z> 0 «fc 

i"&;fc>*>, JKT©tf*S:ff -fel/**2 (9) fcfc-f 7 

(7) a' 43 - q" 
a' 42 - q" 
a' 41 « q" 

a* 40 - q" 

-fel/**l (3) tt, me>©ftl£^$:Xreg{C^M-r-5 (013 : Xreg© 



2 6 
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[0 0 5 3] 

3MCb 4 (x)= (q • a 1 +b 1 +l) mod a 4 £ff-||-r5 0 £1% (q • 
bj+1) <Dtm*ft?1)K Ureg©|B«M©»2fel?ai»»©»CCD«ailROfc«), 
J2*T0>J:e>lC#f#r-t§ o a 4 li4^©^;"e^)S^e>, (q • aj+bj+1 

(8) P 5 =Q 2 [x 5 tf>^ffc] 

p 4 = (q 2 • c 2 + qj) [.x 4 ©^»] 

p 3 = ^ q 2* c l +q l* c 2 +q (P ix. S (D^MSLl 
P 2 = (dj+qj- c Q ) [x 2 ©^fS[] 

■fel/#*l (3) tt, Z.Zlt>(DtYBffi$k%:lJreglZfeffi-tZ> (014 : Uregfl) 

[0 0 5 4] 

q • a ^+ b ^+ 1 = 
q 2 x 5 + 

(q 2 c 2 +q 1 ) x + 
(qgCjH- qj c 2 + q Q ) x + 

2 

(d 2 + q 2 c 0 + qjCjH- q Q C 2 ) X + 

( d l + q l c 0 + q 0 c P X + 
d 0 + q 0 c Q + 1 

[0 0 5 5] 

fit, a 4 KU:*SkfcS:fff-|fi-<5 0 ^ ©HKh&Ff-HUC <fc y x 1 ©^ffi3S 

0 3©£#>. -kV?#2 (9) tti&5lJ&|iS:l/S;^dfSf 1 fr&K»JfflU iSJS» 

aissjcA^-rs. 

(9) p' 4 =p 4 +p 5 - a 43 [x 4 ©«»] 
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p '3 =p 3 +p 5* a 42 t x3 ®^] 
p, 2 =p 2 +p 5* a 41 C x2 ®^®Ll 
P , 1 =P 1 +P 5 - a 4Q +d 1 [x 1 ©^^] 

-fel/?#l (3) tt, m?><7)ff-|t^J|l£U regies "T* (01 5 : Ureg© 

[0 0 5 6] 

*T*f5. Ul/#*2 (9) tti&J|3Si|iS: I/*?**!* 1 mu 

(10) p"3=p'3+p* 4 - a 43 [x 3 CD^tS[] 

p"2=P' 2 + P'4- a 42 [x 2 CD«»] 
P" 1 =P' 1 +P' 4 - a 41 [x 1 ©^] 
p" 0 = p' 4 - a 4Q + d 0 + 1 [x°©flMR] 

•fel/**l (3) tt, ^ne>©ffH¥lg*S:UregJC«JWr-tS (016: Uregtf) 

[0 0 5 7] 

#C&C (q- aj+bj+1) <D?*>* A <Dm&mmz&Wtf&<R^> (8) #M 

(10) T?t^iD»3;h/rv>fcV^&in»^<&. <fc *J£MHtC&&'?' & J£*T© 
J:e>&#f-|£&!!Sfe-r£„ izi/**2 (9) tei&gj&tet: U^X#g¥l fr&flfcUffl 

(11) p 32 = p" 2 + c x • qj_ [x 2 ©«»] 
P 31 =p" 1 +c 0 - qj_ [x^fi&fc] 

-feb*#l (3) Ji, itie><0tMMe*&Ure B JC«H«-re (01 7 : Ureg© 
[0 0 5 8] 



2 8 
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(q • ai +bj+ 1) (Do-ha^m&ftmzmmtfZK r-d (8) a 

fttf-UCSrllJfe-re. "fel/#*2 (9) «*&Slfcli£l^**S¥l ffiU 

(12) b 42 = p 32 + c 2 • q Q [x 2 ©^t5t] 
b 41 =p 31 +c 1 - q Q [x 1 ©^!^] 
b 40 =p" 0 +c 0 - q Q lx°CD&m 

i2l/*#l (3) tt, ^tl^Oft^m^UreglC^M-r^ (018 : Ureg© 

[0 0 5 9] 

ZKZ>J:5tCLT, b 4 (x)#:£#)£>*l<5 0 b 4 (x)= b 43 x 3 + b 42 x 2 + b 

41 x+ b^fcgBlS'rS^CDfc-rs. ftfclC, izl/*#l (3) &Uregtf)|*i^£ 
Yreg£Zreg£lC*&8ft-r<5 (§19 : Yregi: ZregO^S^t) . 
[0 0 6 0] 

#ac, a 5 (x) = Q (x 7 +b 4 2 , a 4 ) SrtMM"*. a 4 «4 «fc5£T?*«5;fr 
Q(Dft^lCfcV>Tttx 7 + b 4 2 (Z)3r^J^TCD^li^il^So b 4 2 = b 43 2 x 6 + 
b 42 2 x 4 + b 41 2 x 2 + b 40 2 -e*>-5*^. b 43 2 x 6 + b 42 2 x 4 + x 7 0*M3 
fcKU&S. JEIT© J: 3 feif!)^ -fe 1/^*2 (9 

) i/^df^i^&^sj&ffi&flfcymb, mwsfcfttfrj&BstcA:*;?-*. 

(l) p 17 =i [x 7 tf>g&fSt] 

p 16 =b 43 2 Cx 6 ©#«] 
P 15 =0 [x 5 (Z)^f!t] 
P 14 =b 42 2 [x 4 ©«R] 

■fel/**l (3) ti, i*lb<Z>ft»^|l£U regie &*ft-f-£ (02 0 : Ureg© 

[0 0 6 1] 



2 9 



ffiSE#¥ 11-3027520 



ffisfL i 1-007384 



(2-1) 

p 26 = p 16 + p 17 * a 43 

= P 16 + a 43 lx 6 (D&m 

p 25 = p 15 + p 17 a 42 
= a 42 [x 5 (Z)#|Sr] 

p 24 =p 14 +p 17' a 41 

= P 14 + a 41 [x 4 tf)3y&] 

^33, a 53 =p 17 Ca 5 ©3?^©^(D^iS:] 

-felx##l (3) p 1? = 1 £Ifc*JffiU Z.tlt><DmW%£$k££iiZU reg^C 
l&Mt"^ (EF2 1 : Ureg<Z>#&ot) „ a 5 (x)= a 53 x 3 + a g2 x 2 + a 51 

x + agQil^So 
[0 0 6 2] 

(2-2) 

p 35 =p 25 +p 26* a 43 C x5 ®&8fl 
p 34 == p 24 + p 26 ' a 42 C x4 ®^8M 

a 52 =p 26 [ a 5 © 2 i:^5o 

1ZU**l (3) p^Jttfp^UiUjiJU ^e,©n*is*aftK:ure 
gMMft?** (02 2: Ureg£>#g(^) . 
[0 0 6 3] 

3 0 ffiliEff^ 11-3027520 



1 1—007384 

(2-3) 

a 50 =p 34 +p 35' a 43 CagGMfeWC] 
a 51 = p 35 [a 5 CD lr^©^©^] 



iri/^^i (3) p 17 &tfp 26 ;&tfP3 5 £ifct;ffiu z:tie>(Z)ftmMm^ 

(02 3 : Ureg©»0^) „ ZltUCT a 5 #ttlT'tfc. 

[0 0 6 4] 

(3) (DMmVlt. (3) U regies $ tl t=. a 5 (x)£X regie 

(0 2 4 : Xreg©#0*t) . 
[0 0 6 5] 

b 5 (x)=(b 4 +l) mod a 5 (x)$:st^-t-&„ b 4 « Yregh Z reg{C^ 
JttStlTV**. MJIC (4) <D$&M£. IT, izl^#l (3) #b 43 , b 42 , b 
41&tfl>40 + 1 £:UregfC|&M-f £ (02 5: Uregtf)^®^) „ 
[0 0 6 6] 

m^5lcA*-r-5o 



b 52 = 


b 42 +b 43' 


a 52 


[b 


5 © 2 


b 51 = 


b 41 +b 43 - 


a 51 


[b 




b 50 = 


b 40 +b 43" 


a 50 


[b 


5 o 0 «c©^©«»] 



b 5 (x)= b 52 x 2 + b 51 x + b 50 i:gtt©i:t5. 

(3) it, i*ie,©ff-KC*g*S:ZregJC*»'r* (0 2 6 :Zreg<Z) 
#0^) o <fcoT, Xreg&tfZ regie a 5 £ b 5 #ft»Sn4i HiZ&Z> B 
»Hta' = a 5 , b' = b 5 T*fe<5o 
[0 0 6 7] 
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# a 2 &tf b 2 &^£l&£o 
[0 0 6 8] 

S^JlCq (x) =Q (b 3 , &1 ) £im b 3 (x)=b 1 2 +x- (a x 
-x 3 ) 2 ZftB-tZ>o -fib, ajttatfCjM&S^e), bg(x)©3&J£U:©3E«: 

(1) b 35 =c 2 2 [x 5 ©^] 
b 34 =d 2 2 [x 4 ©«»] 

b 33 =c l 2 t x3 ®^^ 
itie>©fff-$!t|S^S:-feU^4t 1 (3) fc*Ure*K:jfc|ft"rS (02 7 : Ureg©^ 

[0 0 6 9] 

b t 2 +x • ( ai -x 3 ) 2 = 

c 2 2 x 5 + d 2 2 x 4 + c 1 2 x 3 + d x 2 x 2 + c Q 2 x + d Q 2 
= b 35 x 5 + b 34 x 4 + b 33 x 3 + b 32 x 2 + b 31 x+ b 3Q 

[0 0 7 0] 

mz. q (b 3 , &1 ) &?n*-rs. j:ywjW{caa3*-rsi:je<T©j:^K:ai«o 

■fel/**2 (9) tt, ^i&l/^^lA^tyfflU m##l^t>*-m#| 
5 {CAi7i"S 0 
(2-1) 

p 14 =b 34 +b 35" c 2 C x4 ®^R3 
p 13 =b 33 +b 35" c l C x3 ®^R3 
P 12 = b 35 • c 0 [x 2 ©fiMft] 



11-3027520 



1 1-007384 
q 2 =b 35^^^ > ° q = q 2 x2+ q l x+ Qo^^^" 5 ' 

iri/^^i (3) b 35 $: upxzmi #e>#»;aju i*ie>©tfi«§*i: 

£lC, (02 8: UregO^H^) . 

[0 0 7 1] 

(2-2) 

q 

p 23 = p 13 + p 14 * c 2 ^ x ^^^G 
( P 2 2 = P 12 + p 14 * c i tx (O^tWil ) 

q 1 =P 14 ^fe'6o q 0 = P 2 3"^^>-So 

•fel/**l (3) fct, q 2 2fctf p 14 & ;fr&Bi»;t&U itl&CDfff 

m^S^^lC, UregJCf&HrT* (02 9 : Uregtf>#g|^) „ 
[0 0 7 2] 

^»5*ve>gw-«ty % jyA-*n\zxj3-?& a zlzlv. q~=i/c 2 2 i:-t 

[0 0 7 3] 

a 4 (x)= q 2 (x) + x?:*E.=:y JMtf 6iM#&<&©T?, JS*Ttf>#f-JI £§^?-r £ 
. 12 I/? #2 (9) &^&4fi£ l/^*#^l#.tf-f >>^-# 7^«(Jffil 

(3) a 43 =0 [x 3 (Z>$y&] 

a 42 =q l 2 " q ~ 2 C x2 ®«*3 
a 41 = 1 • q" 2 [x<Z>««] 

a 40 =q 0 2 - q -2 [x°©««] 
Off l/# 3? l (3) ttXregJC (H 3 0 : XregCD* 
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4 3 2 

V>„ (a 4 (x)=x +a 43 x + a 42 x^4- a 41 x + a^ilfB^^^o 

[0 0 7 4] 

7£IC, b 4 = (b 3 +l) mod a 4 l:ftft5 0 a 4 {i4^t$.5A^ (b 3 + 

i) ©3r^T^^iPJ^fmo^^c^^^bT : bftW^ii^*^^^v^ 0 ure g 

(4) b 35 =c 2 2 [x 5 (Z)#|5t] 
b M =d 2 2 [x 4 <Z>^] 

b 33 =c l 2 tx 3 ®^] 
b 32 =d 1 2 [x 2 ©^] 

rtie>©fflt^$:i2 I/** 1 (3) teUreglC&M-TS (03 1: Ureg©» 

[0 0 7 5] 

fit a 4 tCi:^PJ^ff#$:^e)o -fib, b 3 © 1 7£<Z)^£j&nli:-r «k 



p 14 = 


b 34 +b 35' a 43 








b 34 [x 4 ©^] 






p 13 = 


b 33 + b 35 * a 42 


[x 




p 12 = 


b 32 + b 35 * a 41 


[x 




p ll = 


b 35 * a 40 + c 0 


[x 


1 ^mi 



Z.ftt>(DftMU$k%:-t 1 (3) teUregtC&m-f £ (0 3 2 : Uregtf)* 

[0 0 7 6] 

$ h\Z a 4 JC«fc*«Ijfefff3StS:ff^ 0 <IU b 3 <D0 7£(Z)^&t>*l £;&m-f £<> J: 
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4f 3p 1 1 — 007384 

(6) P 2 3 =P 13 +P 14* a 43 [x 3 CD^|5c] 
p 22 =p 12 +p 14* a 42 ^ x 

p 21 =p ll +p 14" a 41 t xl< ^^^ 
P 9n = Pi/. • a An +d n 2 + 1 [x°©^i5t] 



Zltl^OftW^Sr-fe^^^ 1 (3) liYreg^ZreglC^i-S (0 3 3 : Y 
reg&t>*Zreg©»0^) o -*uct, b 4 (x)*^^ 0 fc 0 
[0 0 7 7] 

[0 0 7 8] 

&>±<D®M*#m7U-£. tT^t^03 4 (7) <fce>tC&€>„ ft*J»C, a^x), 
b x (x), a 2 (x), b 2 ^A*^tlS (^7^:71 0 0) 0 2^flCCD^{Cli, a x 

•5 Uf'^HO) 0 =fol, 2-f&3S©*-^tCtt, q"=l/c 2 2 $:ftlt5 ( 
^f7^12 0) Q q (x) =Q (b 3 , a x ) £Ureg&clMf£ (X^ 

y^l 3 0) 0 Ml <£cfc5&®J&-eteX-5^y :71 2 0&t>*l 3 0 tel^lC^T $ 
*l& 0 fit, ?{fc£;tx£ a 4 (x)= q~ 2 (Ureg 2 +x) fcftlflt, Xre 

gtc^M-TS &*rvfi 4 o) . x^y^i i o t*11t<z>»rt&££ 

WWrStlfclB^tCtt, a^^a^ft^^^^ltW-TSo «*4fc*&#3g5£ 
«<lT?ftV^»^li. ^fEtteJ&U&fr&V^ fit, s 1 (x) ai (x)+ s 2 (x) a 
2 (x)=lt*&5s 1 ?:tflU Yreglcte^ftS (Xf7^15 0) „ #;IC q (x 
) = Sj (b 1 +b 2 ) mod a 2 £#f$§LU Zreg^C^f^ Uf7^16 0) „ 
fit, q"=l/q 2 2 5:tf-|ttS (Xr>y^l 70) 0 tfe, Q (q 2 a p a £ 
) +x+ c 2 +e 2 £fmu UreglC^-TS Uf^l80) „ ^.-^y^l 
7 OM^r^^i 8 OteBi ©tS^tlilHi^tc^-rs. fit, ^—vfit 
$tlfea 4 (x)= q~Ureg£ft#ll> XregtC|&|ft-r£ Uf^yi9 0) . 
[0 0 7 9] 

jt^T©Matt, as»iiij¥Arjf2«»i:^jfe*6 0 b 4 (x)= (b 3 +i) mo 

3 5 ajSE#^ 11-3027520 

i 



i 1—007384 

d a 4 £ft#U Yreg^r>*Zreglc^i--5 Ufy^2 0 0) „ fiU iiS© 
iU»©#^fc2f&J¥©«-&-ei4, b 3 ©^#J|&So fit, a 5 (x) = Q (x 7 
+ b 2 2 , a 4 ) fcftHU XregtC^Mi-S Uf^2 10) . S^lC. b g (x) 
= (b 4 +l) mod a 5 &!tlU ZreglC^M-tS Uff^2 2 0) „ 
[0 0 8 0] 

• ^n^ACTHStsr/:^*, fib, z:m#«M^<Z)n>hf^- 

[0 0 8 1] 

[0 0 8 2] 
[0 0 8 3] 
[0 0 8 4] 

^Tmttil^ 1 o ^tl 1 0 1: ft 9 I i: 5:, Mtt««©mi*##|fai$ 

+ 2 mii i m<D&7ti$im.£. 2 ®©3mi[3^ff *>ti« 3 ^ ?&<Dm 1 2 
ittiou a 2 ^n© ttn* & * £ «> * © & -5 o 
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ftt» 




ran 


GCD 


3I+23m 


3I+9M 


3 1 ( I >f 9 1 (M) 




15m 


4M 


4t(M) 




I+20m 


I+6M 


t( I>f t(M) 


t> 4 (x) 


17m 


5M 


5t(M) 


4 5 (x).b^(x) 


6m 


3M 


3t(M) 




41+8 lm 


4I+27M 


4t(I>f22t(M) 



[*2] 



Its 


ttS» 








3m 


2M 


0 




I+2m 


I+M 


t(I>ft(M) 




8m 


2M 


2t(M) 




6m 


3M 


3t(M) 




I+19m 


I+8M 


t(I>f6t(M) 



& sum- <&i$isj *fe2 n m»tti ^n^^ - ? jiT*mftT*g&%(D 

[0 0 8 5] 

*1 (flOHO t(I) > 5t(M) T&£ : fc<Z>h'K>£kTV^. zmtciya 
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IS. ae,JC*2 (2^#) Tffcj: t(I) > 2t(M)T?&S%tf)£:'IK5£LT^£o 
3 tl {C J: y q (x) <D ff J* £ a 4 (x) £ ^ - y * ft ^ * » IC * j£5r (D 1 t J* & 

[0 0 8 6] 

^ 1X^2 lC*fL> T. Itoh, S.Tsujii, "A Fast Algorithm for Computing 
Multiplicative Inverse in GF(2m) Using Normal Bases," Inform, and Compu 
t. , vol.83, No. 1, pp. 171-177, (1989)13^©^ (JgTF. ^-xt^mt. 

v$&) T*GF (2 59 ) ±~et(i)=8t(M)Mvftiz.}i%:m^z>}i. m^otinw 

<D%&, tfiSEil±113mTf*»J, l$iatt:54t(M)T?&& 0 2|J3¥©»-&, ft 

u £c±&MW\ I immtig^<Dmi&£. J £<Dm^, " SCIS*98-10.1.B, Jan. 1998 
[^3] 





to * 


2&* 


S* 




*# 




8 = 0 


3 


1 


3 


l 


8 = 3 


401 


0 


265 


0 


8 = 11 


17477 


0 


10437 


0 



[0 0 8 7] 

t?7«, 2®n<z>m&, mw-Mx-iom. mmxism. ^or^^uxA 

CD^^SVx. *fc7fl©mj|«©«BMS»Sf5tt, Sf©»|[tO. 5 7 2, 2 
[0 0 8 8] 
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miMmzizm^^x 1 6 obitmm<nmm&zft?<Diz&m&mm%:mn 

•?2>£.m4 £&£o 6 0[@L MBit 8 0 Mfto =b(D Ufafe hX 

[*4] 





1 @0>JMF<~&gtt£ p 


XA 

t(M)=59£n?£ 




t(M)=l$o^£ 


20MH2 


19. 35ms 


2. 624ms 


0. 3 28ms 


40MHz 


9. 68ms 


1. 312ms 


0. 164ms 


80MHz 


4. 84ms 


0. 6 56ms 


0. 082ms 



[0 0 8 9] 

-^il0V7h^x7iCi;6|liT'}i, Alpha 21164 (2 5 0MHz) (Al 
phataDigital Equipment Corp. <D~ffiM) fcfflW MM IC 5 0 0 n s, 2fgBfC 
S5 0/ts, 1 6 0bit(Z)IMfClj;l 1 8 m s ffi^I^SrSbfc ZlCO^^il 

MHz, Case A (DWbizXffii 5 Case B ©i-&t*|«I 5 0 ^ Case Ctf)^-^ 
^3 6 Otitic #131 RS AR!-i§-&C;J3V^ir/BA- K ^ T IZ J: -5 ff H 

[0 0 9 0] 

$Lt=.g±&T*m^£^z.*>ftz> 1 6 obitn^Rffl^Bf-^-e«, sr^fg, nik 

KEI ELECTRONICS, 1998.3.23, (no. 712) pp. 231C <fc <5 £ 2 0MHz (DWltfrMffl. 

mxm^^no<Dizm^3 . ems <Dmm&. £t~Mmw.i&, mmt±-, 
-mn, "mft®nm^v7<D&,ft, -ffy^xf^, a-7-i, oct. 1998 



ffi$E4f ^ 11-3027520 
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K£Z>£2 7K^f-b©A-F , ?x75:2 OMH z <7>W}ftM&WLT% 6 0ms© 
[0 0 9 1] 

o -MfcfemfaZGF (2 n ) SfcSI^OJA- K^iT*ttn(Z)2^lC, 
m^«#fcn©2f|ilCjfc0!!U ifUI©Xt;- 1/ {1- (log n g) } Kit 

mtzzto it>t, mn^vttfe&mmcfttzik&mts* {i+io &n g + (i 
^i£69(cii®«R™Bif-^©«e.^g 2 {i + iog n g+. . . } tLvmmT*$>z> 

[0 0 9 2] 

*&&&t=.&iziZM i fa&lizm&WiBf%:ft\<\ © * y n V - ic v v if > 

=M?fc>&tt*Ui&e>&VN 0 fit8 *dy* (clock) Tm^^ftW?:^ 
4 ©Case B©f ^i:^V>TVHD L (IEEE std 1076 -1987) ^M^T^ff U 
^^r^-V*;^ Leff = 0. 2 7 ti mCOCMO S*f — h7l^~ • f^/ni?- 
(IBM CMOS 5SE) IC V >y tf > L fe^COM £=fT o -£<D%g^ 
WX*mm:±mmi 2 n s («*lft#MM8 3MHz{C^)StS) , /\-K 
"Jx/t^X^UOKt;!/ (cell) (Z)^S:#fcc >y ? ©if >f XtC 



ffj|iE^i)2 11-3027520 



#5J2 1 1 — 007384 



[315] 



01 G>Z?P^£ 








34265-fert' 




-*» 


1344-fert/ 






27414^ 






18408^ 




=»> hP-7 


9749^ 




-feL/^^r 1 


37140^ 




■bu^f 2 


17402-tyP 




ft 


145722^ 





vLsit£££.it'<x&-\-$-mmwtem^x*&z> B ^gf (2 59 ) om^m 

^tltp (x) =x 59 +x 6 +x 5 +x 4 +.x 3 +x + 1 ^M^fc IfittGF ( 
2 59 ) 7t--7 J rJ • • ^— X (Optimal Normal Bases: GF ( 

2 n ) ©jflE«i£Jl£©»t»*CaiJMe^lbit3^2 n- 1 m<D&<Dfat*%> fc©) 

[0®tf>fgi?£&ffcEE] 
[01] 

[02] 

[03] 



4 1 
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#^ 11 — 007384 

q (x) = Sj (bj+bg) ">od a g^a&flSS&teitt bt Ureg©:fKffil£ 
[04] 

q (x) = Sj (b x +b 2 ) mod a 2 <D&rpffi%:$:fem hX Ureg(Z)^S: 
[05] 

q (x) =s 1 (bj+bg) mod a 2 <D&$*1&gk%:%1lfS IT ^3 Ureg©4K^& 
[H6] 

q (x) ©*^MJ|l£&MLTV%£Zreg©:fKffi£^1-0T*&£o 
[07] 

a 4 (x) = Q (q 2 a r a 2 ) + x + c 2 + e 2 ©*£tfr#S^S:&$| IT V** Ureg© 
[0 8] 

a 4 (x) = Q (q 2 a 1 , a 2 ) + x + c g + e 2 ©5i*^*S:«3»bT V^SUreg© 
[09] 

a 4 (x) = Q (q 2 &1 , a 2 ) + x + c 2 + e 2 ©&t£^J|l LT ^£ Ureg© 
[010] 

a 4 (x) = Q (q 2 a p a £ ) + x + c 2 + e 2 <D&tpU%;$:faffl IT Ureg© 
[011] 

a 4 (x) = Q (q 2 a p a 2 ) + x + c 2 + e 2 ©3itMg*S:f6j|* Lt Ureg© 
[01 2] 

a 4 (x) = Q (q 2 a p a 2 ) + x + c 2 + e 2 ©^tf*3£:££&$r IT Ureg© 
[013] 



4 2 
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#5p i 1 — 007384 



^ - v V i t 3 *l t=. a 4 (x) © £ b T V \ £ X r eg© ^ffi & ^ f EI T? & 

So 

[014] 

b 4 (x)= (q • aj+b^l) mod a 4 <Z)^t£^^$:l&M ^-5 Ureg<Z)}£ 
[SI 5] 

b 4 (x)= (q • a^b^l) mod a ^^^M^^^M It UregCD^ 
[SI 6] 

b 4 (x)= (q • a 1 +b 1 +l) mod a 4 ®^cfi^^ilbTV>5Ureg0t 
[SI 7] 

b 4 (x)= (q • aj+bj+1) mod a A <D&%*M$kZ&ffi VX V^S Uregtf)^ 
[SI 8] 

b 4 (x)= (q • aj+bj+1) mod a 4 CD^i£^:^£|&2ftLT Uregtf)^ 
[SI 9] 

b 4 (x) ©*^MHI b T V% £ Y regi: Z regtf)^ Etfe -5 . 
[02 0] 

a 5 (x) = Q (x 7 +b 4 2 , a 4 ) (Z)^tt^M^$:^&^flbTV^SUreg©^$:^f 
[02 1] 

a 5 (x) = Q (x 7 +b 4 2 , a 4 ) <D&tpffi$k$:fefflLX ^^5U reg©^. 
[02 2] 

a 5 (x) = Q (x 7 +b 4 2 , a 4 ) <A^JiS:ljl£&»bT^£Ureg©^J»£^-3- 
0T*&5„ 
[S2 3] 



ffifE*^ 1 1-3027520 



#3* 1 1 — 007384 

a 5 (x) = Q (x 7 +b 4 2 , a 4 ) (D&^1&$k*&mLX\<\ZUreg<DftM*:mir 
0T'3d6 o 
IH24] . 

a 5 (x) (Dft^^^^M bT V^S Xreg©^S:^-rairS>So 
[02 5] 

b 5 (x)= (b 4 +l) mod a 5 (x)©^cfi^5:^MLT^-2>Ureg<Z)^$:^ 
[02 6] 

b 5 (x) CD*^|^ UT ^ § Z regCD^ffi Sr^i" MX$> & „ 
[02 7] 

q (x) =Q (b 3 , aj) ©5ii4i*g^S:*iWlbT^6Ureg©^JS€:^'r0-C 
[02 8] 

q (x) =Q (b 3 , a x ) ^D^f^ I ^$:t&^bTV^SUreg(D^M§:^•t0-e 
[02 9] 

q (x) ©*»i^g*^: : ^^^^ftbTv^«ureg©^JB^:^•rH•^*>s 0 

[03 0] 
[03 1] 

b 4 = (b 3 +l) mod a A (Dm^%g^&faffiLX^&lJre s <D&M : &*k-tmr* 
[03 2] 

b 4 = (b 3 +l) mod a 4 ©aitt»3ie*S«j»UTV^SUreg©^J|BS:^-rHT? 
[03 3] 

b 4 <Z>:tt&j|S£ & bTV^SY regi: Z reg©:Rffll &^t0T' & & „ 
[03 4] 
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[03 5] 

m^<o n > if =l - * <Dm&m z m-t net %> & . 

i 

3 * # 1 

5 mn%5Rtfr.m^ 

7 >f>/1-# 
9 -fe 2 

l i ziy 



4 5 11-3027520 
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[«K*] 
[HI] 



mm 



-klstr* 1 



•bl/i>* 2 



1 



i-U 



a 




□□□□□□□ 



]□□ 

a „ 



-Xreg |p 2 1 

□□□□ I I □□□ I 
rYreg 1 i— b l 1 

□□□ 



□□□ 



■Zre g ■ 



□□□ 



□□□ 



r 



ii 
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[H2] 



-Ureg- 



□□□□ 



.a 




I Xregr 



□□□□ 




I Yreg- 





■Zieg- 



□□□ 




[03] 



-Ureg- 




8 i2- b i +8 ir 1>, 2 



p 4 =s 12 ,b 2 
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[04] 



#5p 1 1 — 007384 



—Ureg- 



p 'l =P 4* e 0 



P 2 +P 4* 6 1 



P 3 = 

P 3 +P 4 - e 2 



[0 5] 
-Ureg — 



p °o= 



p b +p 3 e 0 



p 'l +p 3' e l 



P" 2 = 

P 2 +P 3' e 2 
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